getgrav

Records229All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high123CVSS 7.0–8.9

Exploited now

getgrav records in CISA KEV

No getgrav vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Grav 57 records HIGH Grav-plugin-admin 9 records HIGH Grav Cms 5 records MEDIUM Dom-sanitizer 1 record LOW Grav-plugin-api 1 record HIGH Grav Admin 1 record LOW

Records

1 record in Grav-plugin-api · all components

TI-2026-31052 CVE-2026-42843 · GHSA-r945-h4vm-h736

grav-plugin-api: Grav API Privilege Escalation to Super Admin

HIGH 73

Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0035 Published 2026-05-11 Fixed in 1.0.0-beta.15 CWE-863

Open these records in search →

Critical	27
High	123
Medium	76
Low	3
No CVSS	0